Sekit CSF · Governance & Risk · Policy

RCF-0004Roles & responsibilities

Security roles and responsibilities are formally defined and assigned

Mapping at a glance

RCF-0004Roles & responsibilitiesGovernance & Risk · Policy

A.5.2Information security roles and responsibilitiesISO/IEC 27001:2022 GV.RR-01Leadership accountability for cyber riskNIST CSF 2.0 GV.RR-02Roles and responsibilities establishedNIST CSF 2.0 GV.RR-03Resources allocated for cybersecurityNIST CSF 2.0 GV.RR-04Cybersecurity in human resourcesNIST CSF 2.0

RCF-0004 maps to 6 controls across the published frameworks. +1 more in the table below. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.5.2Information security roles and responsibilitiesequivalentSekit's Roles & responsibilities policy is the direct implementation of A.5.2: it names a specific owner for overall security and for each recurring duty, which the control asks organizations to document.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

GV.RR-01Leadership accountability for cyber risk GV.RR-02Roles and responsibilities established GV.RR-03Resources allocated for cybersecurity GV.RR-04Cybersecurity in human resources

Maps to ISO/IEC 42001:2023 — Annex A

Curated mapping with the reasoning, not just the codes.

A.3.2AI roles and responsibilitiessupportsRCF-0004 requires security roles and responsibilities to be written down; A.3.2 needs that same discipline applied per AI life-cycle stage, since a general security owner does not automatically cover AI selection or oversight decisions.

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Security roles and responsibilities

The document or chart showing who owns each aspect of security in the company (e.g. a security org chart or a RACI matrix).

From the Sekit evidence catalog

This topic through the other lenses

All Governance & Risk controls

Ask Sekura: “What evidence proves RCF-0004?”

Also via MCP, free with account